Dev.to
7/6/2026

I interrogated my AI to prove it forgot.
Short summary
Built Lethe to verify AI deletion compliance (GDPR, India DPDP Act 2023). Uses a red-team Auditor agent firing 15 extraction probes across four attack vectors before/after deletion. Discovered that dataset deletion alone leaves cognified graph references intact—proper erasure requires cascade deletion. Generates tamper-proof signed certificates for regulators.
- •Developed Lethe, a hackathon project to verify AI systems have truly deleted user data, not just records
- •Red-team methodology tests deletion via four attack vectors: direct extraction, inference, reconstruction, and relational leaks
- •Found real bug in Cognee Cloud: standard deletion leaves graph traces; cascade deletion needed for verified erasure
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



